Path Traversal Vulnerability in BOSH CLI Tool by Cloud Foundry
CVE-2026-47826

8.5HIGH

Key Information:

Vendor

Cloudfoundry Foundation

Status
Bosh Cli Tool
Vendor
CVE Published:
9 July 2026

What is CVE-2026-47826?

The BOSH CLI tool has a critical vulnerability related to path traversal via the blobs.yml configuration. This flaw enables an attacker to exploit the tool to create arbitrary files on the system, potentially leading to the exposure of sensitive information. This issue affects all versions of the BOSH CLI tool prior to version 7.10.4, underscoring the importance of updating to the latest release to safeguard against possible exploitation.

Affected Version(s)

BOSH CLI tool 0 < 7.10.4

References

https://www.cloudfoundry.org/blog/cve-2026-47826-blobs-ya...

CVSS V4

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

CVSS V3.0

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.